GDPR - the EU General Data Protection Regulation - is now in effect. The regulations are designed to protect the data privacy of EU residents, but because the rules affect any company handling EU data, their effect is actually international.